Software Engineer, HSM Infrastructure Security, Consumer Devices

OpenAI
San Francisco
Workplace: OnsiteFull timeUSD 347,000 - 445,000 annuallyFunction: Software EngineeringExperience: 5+ yearsSkills: ["Communication","Collaboration","Threat modeling","Security design evaluation"]

Design and implement security-critical software and firmware for hardware-backed key protection across the device ecosystem. Harden the policy-to-HSM trust boundary for cryptographic signing and certificate issuance, build HSM trusted applications and device drivers/interfaces (e.g., PKCS#11/cryptographic providers), and develop firmware/software enforcing key lifecycles. Drive end-to-end cryptographic protocols for attestation and secure boot, validate with fuzzing/fault-injection, and collaborate with hardware, firmware, infrastructure, application, and security teams.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
OpenAI
OpenAI
2 days ago

Software Engineer, HSM Infrastructure Security, Consumer Devices

āœ“ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live

Job Summary

Design and implement security-critical software and firmware for hardware-backed key protection across the device ecosystem. Harden the policy-to-HSM trust boundary for cryptographic signing and certificate issuance, build HSM trusted applications and device drivers/interfaces (e.g., PKCS#11/cryptographic providers), and develop firmware/software enforcing key lifecycles. Drive end-to-end cryptographic protocols for attestation and secure boot, validate with fuzzing/fault-injection, and collaborate with hardware, firmware, infrastructure, application, and security teams.
Location: San Francisco
Workplace: Onsite
Employment Type: Full time
Job Function: Software Engineering
Seniority: Mid level

Key Responsibilities

  • ā€¢Design and implement security-critical software and firmware for HSMs, secure elements, TEEs, and hardware roots of trust.
  • ā€¢Build and harden the policy-to-HSM boundary that authorizes certificate issuance and cryptographic signing operations.
  • ā€¢Develop HSM trusted applications, firmware components, host interfaces, device drivers, SDKs, or cryptographic service integrations.
  • ā€¢Implement or extend cryptographic interfaces including PKCS#11 components, OpenSSL providers/engines, and comparable hardware-security interfaces.
  • ā€¢Build security capabilities for device attestation, secure boot, factory provisioning/restoration, and authenticated key lifecycle enforcement, supported by testing with harnesses, emulators, fuzzers, and fault-injection tooling.

Pay and Benefits

Salary: USD 347,000 - 445,000 annually
Equity and Bonus:Equity

Key Requirements

  • ā€¢5+ years building secure embedded firmware for constrained environments.
  • ā€¢Deep programming experience in C, C++, or Rust.
  • ā€¢Hands-on experience developing security-critical software or firmware within or directly adjacent to an HSM, secure element, TEE, or hardware root of trust.
  • ā€¢Experience building HSM firmware or trusted applications; cryptographic mechanisms or hardware-accelerated cryptographic services; and/or HSM device drivers, host libraries, SDKs, or middleware.
  • ā€¢Strong knowledge of applied cryptography, digital signatures, key hierarchies, secure key management, and cryptographic protocol design.
Experience:5+ years
Skills:CommunicationCollaborationThreat modelingSecurity design evaluation
Tech Stack:CC++RustHSMSecure elementTEEHardware root of trustFirmwarePKCS#11OpenSSLKMIPX.509Remote attestationSecure bootMeasured bootDevice identityThales LunaNShieldUtimacoMarvell LiquidSecurity

Company Brief

OpenAI
Develops and deploys advanced generative AI models (including ChatGPT and DALLĀ·E) and AI infrastructure, providing APIs and consumer products to accelerate safe AGI for broad benefit.
Industry: AI & Machine Learning
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Scaleup
Valuation: Hectocorn (USD 100B+)
Funding: Series E+
Headquarters: San Francisco, United States
Founded: 2015
Glassdoor
Glassdoor: 4.4
WebsiteLinkedInGlassdoor